Jiang Zhiwei

The issue allows an attacker to check and download fault information by accessing a special URL, resulting in an information leak.

The issue allows an attacker to trick a user into clicking a URL containing malicious scripts, potentially leading to the obtainment of user information or session hijacking, due to a cross-site scripting (XSS) issue.

A cross-site scripting (XSS) issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via the `loginName` parameter to "cgi-bin/doLogin CgiEntry" and possibly other unspecified vectors.